Static task
static1
Behavioral task
behavioral1
Sample
9614df88a37a3db4c409b219dbf5fac58ecfd6110f0227cd8215cc91e8c27c86.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9614df88a37a3db4c409b219dbf5fac58ecfd6110f0227cd8215cc91e8c27c86.exe
Resource
win10v2004-20220901-en
General
-
Target
9614df88a37a3db4c409b219dbf5fac58ecfd6110f0227cd8215cc91e8c27c86
-
Size
3KB
-
MD5
8f561d3ba3e90e3f4c9e3a9aa61a3ed4
-
SHA1
3b09d9f17e8ed9c7d476bca9b9f8d914b63faee8
-
SHA256
9614df88a37a3db4c409b219dbf5fac58ecfd6110f0227cd8215cc91e8c27c86
-
SHA512
28c3d1fc6f2d7a733172e8192a76c640a285fff45c95d5df36f9e15107c0e7e658fcf12199aa32d207d0ca28d74c17a05b3dcccd74dc6d42fbab03d2a36fa842
Malware Config
Signatures
Files
-
9614df88a37a3db4c409b219dbf5fac58ecfd6110f0227cd8215cc91e8c27c86.exe windows x86
3dbebb70020057a29d8be74dd016c1b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
MessageBoxA
kernel32
CreateMutexA
CreateRemoteThread
CreateToolhelp32Snapshot
ExitProcess
GetCommandLineA
CloseHandle
GetProcAddress
LoadLibraryA
OpenFile
OpenMutexA
OpenProcess
Process32First
Process32Next
Sleep
GetLastError
Thread32First
Thread32Next
WinExec
WriteFile
SuspendThread
wsock32
socket
connect
WSAStartup
send
gethostbyname
recv
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
shell32
StrStrIA
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE